Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

I am infected according to AVG by Trojan Horse Downloader Agent.ETP and it only tells me that I am infected but it doesnt clean the virus. The infected File is C:\WINDOWS\&NtuninstallQ309521$\wininet.dll.

I tried to run erwido, I updated it but when I press Scan.. it freezes and freeze my PC also, keyboard doesnt respond, so I have to turn my pc off and turn it on again. I unplug this pc from the Hub 'cause I dont know if its gonna damage my other Pc.

_________________________________
Welcome to the Malware removal forums. I will be more than happy to help you work on your problems.
The fixes we will use are specific to your problems and should only be used for this issue on this machine.

Please only use this topic to reply to. Do not start another thread.If any other issues arise let me know.
The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear. So lets do this to the end!
Please if you decide to seek help at another forum let us know. There is a shortage of helpers and tying 2 of us up is a waste of time.
If you have any questions about any advice given here please STOP and ask!

For future reference you shouldn't be the first to reply to your own post as we look for unanswered posts. Yours could of gone unnoticed for a while.

_______________________
Looks to me like this is a false positive made by Avast. It happens.

I would like to know if this was a typo on your part though.

C:\WINDOWS\&NtuninstallQ309521$\wininet.dll.

should of been
C:\WINDOWS\$NtuninstallQ309521$\wininet.dll.

Notice the dollar sign ($) instead of ( &) after windows/

This is a legitimate file .

________________
Other than that your looking pretty clean.
I would do this though.

______________________________
HJTRun hijackthis and choose scan only and place a check by the following lines if present.
Close all other windows and browsers except HJT before clicking on Fix Checked

You have NvQTwk,NvCplDaemon initialize running at Startup. This is a video card tweak. This program is not required to start automatically as you can start it manually if you need it. It is advised that you disable this program so that it does not take up necessary resources. It may be worthwhile to fix it with HijackThis. This is the item to fix in HijackThis:

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.